biga can expose source code through shared links. Treat a sharing session as potentially accessible to anyone who obtains its URL.

Please report security vulnerabilities privately to the maintainers.

Use GitHub's private vulnerability reporting feature if it is enabled for the affected repository. Otherwise, contact the maintainers through an established private channel.

Include:

• The affected repository and version or commit.
• The vulnerability and its potential impact.
• Reproduction steps or a minimal proof of concept.
• Any suggested mitigation.

Do not include real credentials, third-party private data or unrelated users' source code.

Security reports involving unauthorized session access, unintended source disclosure, credential leakage, authentication bypass, injection, or unsafe file handling are particularly relevant.

Please allow maintainers reasonable time to investigate before public disclosure.